Linux Kernel CVE-2026-53376

The AMD Kernel Fusion Driver (amdkfd) is the Linux kernel compute driver enabling GPU compute workloads such as ROCm and OpenCL on AMD GPU hardware. The vulnerable function kfd_ioctl_get_process_apertures_new handles a userspace ioctl request to enumerate process memory apertures (GPU virtual address regions) across GPU nodes. Without an upper bound check on the caller-supplied num_of_nodes parameter, the kernel may perform out-of-bounds memory access - indexing or allocating beyond a fixed-size structure - when the value exceeds the maximum supported count. The CPE cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* confirms the Linux kernel itself as the affected component. No CWE was formally assigned, but the root cause class is consistent with CWE-20 (Improper Input Validation) or CWE-129 (Improper Validation of Array Index), where unchecked userspace input directly controls kernel memory operations. Five separate stable-branch backport commits were applied at git.kernel.org (4a8093c7, 6ba6ec5f, 44d5a450, 7b80137e, 74b73fa5), indicating broad version impact across maintained stable trees.